Pomegra
AvalonX left 18 months of stealth with up to $10 million from Ridown Capital to sell continuous, AI-driven penetration testing to small and midsize businesses.
- AvalonX announced on October 28, 2026 that Ridown Capital is investing up to $10 million in the Georgia-based startup.
- Its Artemis platform runs autonomous attack simulation, with human experts verifying findings, on a monthly subscription.
- Round stage, valuation and any co-investors were not disclosed.
Lead
AvalonX Inc., an offensive-security startup based in Alpharetta, Georgia, emerged from 18 months in stealth on October 28, 2026. Ridown Capital is backing it with up to $10 million. The company is selling continuous penetration testing to small and midsize businesses (SMBs) that now buy it, if at all, as an annual or one-off audit.
CEO and co-founder Craig Goodwin, a former chief information security officer at Fujitsu, Monster and CDK Global, leads the company. Ricardo Valdes and Ben O'Nion complete the leadership team. The three together claim more than 50 years of information security experience.
What Does AvalonX Actually Sell?
AvalonX sells a monthly subscription to Artemis, a platform that attacks a customer's systems on a recurring basis and reports exploitable paths into the network. Autonomous agents do the probing. Human experts then verify the findings, which is meant to cut the false positives that plague automated scanners.
The platform runs on a proprietary security model called Aether, which the company describes as a 400-billion-parameter system. AvalonX says it trained Aether on nine years of real-world offensive-security data and 60 billion dark-web records. Those figures come from the company and have not been independently checked.
External tests return results the same day and require no software installation. Findings map to compliance frameworks including SOC 2, ISO/IEC 27001, PCI DSS v4.0 and HIPAA. A free initial test is available through the company's website. Pricing was not disclosed.
Who Is Ridown Capital, and Why Does the Investor Matter?
Ridown Capital is the investment arm of Aaron Brown and Darren Ridge, the co-founders of the UK telecoms and IT provider Onecom. Onecom serves more than 65,000 SMBs, and its parent, Ridown Group, reports annual revenue above $500 million.
That customer base is the more interesting asset than the cheque. An investor whose sister company already sells to tens of thousands of small businesses offers a plausible distribution route, though the announcement does not describe any commercial agreement between the two. Brown said of the target customers that "they're targeted like enterprises but resourced like startups."
The wording "up to $10 million" also deserves a note. It leaves open whether the full amount has been funded or is tied to milestones. AvalonX has not named a round stage, a valuation or other investors, so the size of the stake and the terms are unknown.
Why Is Continuous Testing Aimed at SMBs Now?
The pitch rests on a gap in how security gets bought. Goodwin argues that large enterprises test constantly because they have red teams, consultants and budgets to match, while most smaller firms test once a year, if they can afford it. Infrastructure and software change weekly, so an annual report is stale soon after delivery.
The threat data points the same direction. Verizon's 2025 Data Breach Investigations Report found ransomware in 88% of breaches involving small and midsize companies, against 39% at larger organisations. Attackers have no reason to skip smaller targets, and smaller targets are the ones least able to afford a boutique consultancy.
How Crowded Is the AI Pen Testing Market?
The field is crowded and well funded. Dutch startup Hadrian raised $40 million in October to expand its AI-agent platform for finding exploitable weaknesses. French startup Fleuret AI raised a €4 million pre-seed round for automated testing. Established names such as Pentera and Synack already sell automated or crowd-assisted testing.
Against that, a $10 million commitment is modest, a quarter of Hadrian's October round. Q3 cybersecurity funding rose roughly 50% from the prior quarter, which suggests investors are paying for the category. It also means AvalonX must differentiate on price, packaging and reach into smaller accounts rather than on the idea of AI-driven testing itself.
What Comes Next for AvalonX?
The first test is conversion from free scans to paid subscriptions. The free initial test is a low-friction entry, but SMB security budgets are thin and churn tends to follow any month in which nothing alarming turns up. Customers will judge the human-verification layer by how few false alarms reach their inboxes.
The second is the Ridown link. If Onecom's customer relationships translate into bundled sales, AvalonX could reach scale faster than a typical seed-stage rival. If not, it competes for the same small-business accounts as better-capitalized vendors, with an unverified model and no disclosed customer list.
Outlook
AvalonX enters a market where demand is clear and competitors are plentiful. Its $10 million backing, the Ridown distribution angle and a compliance-mapped, subscription-priced product give it a defined niche. The undisclosed valuation, round stage and customer numbers leave the strength of that position unproven. The next signals will be paid-customer counts, pricing, and whether Ridown's small-business network turns into sales.
